Application layer protection has improved traffic control and supports my initial security testing
What is our primary use case?
I have been using F5 Rules for AWS WAF for a short time and want to discover more about it.
My main use case with F5 Rules for AWS WAF is testing it out.
I don't have a quick specific example of what I'm testing at this moment.
For now, I don't have anything else to add about my testing experience so far.
What is most valuable?
The best features F5 Rules for AWS WAF offers, from what I've seen or read so far, are application layer protection.
I am referring to application layer protection with F5 Rules for AWS WAF, which stands out to me as using something similar to iRules to protect applications.
F5 Rules for AWS WAF has positively impacted our organization for security through the implementation of traffic rules in our application.
I have noticed specific benefits such as easy management with F5 Rules for AWS WAF, but I think that it's too early to provide a definitive assessment because I started using it only a few days ago.
What needs improvement?
I don't know how F5 Rules for AWS WAF can be improved because I have only been using it for a few days.
I don't have anything to add about the needed improvements for F5 Rules for AWS WAF at this time.
For how long have I used the solution?
I have been working in my current field for about two years.
What do I think about the stability of the solution?
F5 Rules for AWS WAF is stable in my experience so far.
What do I think about the scalability of the solution?
From what I've seen, F5 Rules for AWS WAF's scalability is stable for now.
How are customer service and support?
I have not had any experience with customer support for F5 Rules for AWS WAF yet.
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
I did not previously use a different solution.
How was the initial setup?
I had a great experience with the pricing, setup cost, and licensing.
What about the implementation team?
My company does not have a business relationship with this vendor other than being a customer.
What was our ROI?
It's too early to talk about a return on investment with F5 Rules for AWS WAF.
What's my experience with pricing, setup cost, and licensing?
I had a great experience with the pricing, setup cost, and licensing.
Which other solutions did I evaluate?
I did not evaluate other options before choosing F5 Rules for AWS WAF as it was my first time.
What other advice do I have?
It's too early to provide my experience or advice to others looking into using F5 Rules for AWS WAF.
I don't have any additional thoughts about F5 Rules for AWS WAF before we wrap up.
I found this interview at AWS re:Invent.
I gave this review a rating of 8.
Which deployment model are you using for this solution?
Private Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Evaluating the Effectiveness of F5 BIG-IP Advanced WAF ln Enhancing Application Security
What do you like best about the product?
its real-time threat intelligence integration, leveraging F5's Security Operations Center (SOC) and global threat intelligence network. This integration ensures that the firewall remains constantly updated with the latest threat trends, enabling it to proactively defend against emerging threats. Additionally, the Advanced WAF allows for extensive customization options, empowering organizations to tailor their security policies to the unique requirements of their applications.
What do you dislike about the product?
WAF is relatively high, positioning it as a more suitable option for larger enterprises rather than smaller organizations with budget constraints
Configuring and managing the Advanced WAF requires a certain level of expertise, which could result in inefficiencies or misconfigurations if not properly addressed.
What problems is the product solving and how is that benefiting you?
It enables organizations to customize security policies based on their specific application requirements. This flexibility allows for fine-tuning and optimizing security measures, reducing false positives and negatives while maintaining an optimal balance between security and application performance.
All in one feature set
What do you like best about the product?
A single appliance has all the features which require a webserver service, WAF, Server load balancer, GSLB
It has iRule feature, where I can script my custom requirements where it does not support by default.
What do you dislike about the product?
For the advance reporting stuff, need to procure an additional system call BIG-IQ, which is not coming out of the box with BIG-IP.
What problems is the product solving and how is that benefiting you?
I have deployed many Advance WAF solutions. it is ready grate. Server load balancing and WAF requirements.
F5 Big-IP ASM solution is rock solid.
What do you like best about the product?
Stability, support and scalability capabilities makes it more productive and seamless.
What do you dislike about the product?
Licensing policy is little bit tough after changing the perpetual license to per CPU costs, and ofcourse the tutorial of configurations that is not available anywhere except you have done the f5 certificates. Also at initial level anyone need expertise and as you spend time it gets easier.
What problems is the product solving and how is that benefiting you?
Protecting the web applications in very secured manner for eg pro active bot defense, ip intelligence to block traffic from geo locations, and protect from all the top ten OWASP.
Best WAF
What do you like best about the product?
It has mitigation for OWASP TOP TEN vulnerabilities and easy to use GUI
What do you dislike about the product?
Nothing sort , I dont have any dislike to mention on this
What problems is the product solving and how is that benefiting you?
it is good in stopping web based attack as well DDOS.
F5 Advanced Web Application Firewall - Meet to all the WebApp Security features
What do you like best about the product?
The overall experience is good with WAF. The web API is easy to understand and deploy in the production network. When there is a need to support, The support team understands the products and provides very helpful info.
What do you dislike about the product?
Nothing much. I am still exploring the features and will add them as I go along.
What problems is the product solving and how is that benefiting you?
Limitation with current WAF solution and requirements for product which overcome limitations, support detection for all type of web attacks, support high number of web requests and SSL connections.
Recommendations to others considering the product:
F5 AWAF has all features required for Web Application Security from standard keywords-based / signature-based detection, profile creation, DDOS protection, API security, Client-Side Protection (Data Safe feature). Tech team has required expertise in evaluating our requirements, environment study, and recommended solution and deployment strategy.
Its a very amazing product with so much granularity
What do you like best about the product?
Application Layer Encryption, API Inspection, and Behavior Analytics.
What do you dislike about the product?
Development/Testing license expiry after only 3 months
What problems is the product solving and how is that benefiting you?
Bot Mitigation and Web Application level attacks
F5 has the ability to protect most of the vulnerability's over internet
What do you like best about the product?
Regular updates for attack signature's ,protection against owasp top10
What do you dislike about the product?
Tmos commond line utility, false positive, traffic learning suggestion
What problems is the product solving and how is that benefiting you?
We don't need separate load balancer if we have f5 awaf . It prevent most of the internet facing vulnerability s
Recommendations to others considering the product:
It has the ability to protect most of the internet vulnerabilities. It improves the organization standard
It is very strong application to use which protect your environment from lots of attacks
What do you like best about the product?
Instant alerts , monitoring aspects and suggestions
What do you dislike about the product?
Nothing much costing as compared to other providers
What problems is the product solving and how is that benefiting you?
Ddos attacks , identify the request based on region
Recommendations to others considering the product:
Yes I will
Very useful with owasp top 10. Dealt with it in several organizations
What do you like best about the product?
Covering OWASP, supporting virtualization
What do you dislike about the product?
A bit of Complexity during troubleshooting
What problems is the product solving and how is that benefiting you?
Helps as additional layer to web application security after pentesting
